Manage Automation Webhooks

Overview

Use automation webhooks when Fediverse actions on your site should trigger external tools automatically. This saves manual follow-up work and keeps moderation, auditing, or downstream integrations in sync.

This task is available only in the Pro plan. After you save a webhook, the endpoint appears in the webhook list and subscribed events are delivered to the target URL with Fediverse-specific request headers and an HMAC signature.

Before you begin

• You need Joomla Administrator access to the Fediverse component.
• Webhooks is available only on the Pro plan.
• You need the target system’s webhook URL and a secret that both sides will use for request signing.
• Confirm which Fediverse events the receiving system actually expects before you create the endpoint.

Steps

1. Open Components -> Fediverse -> Webhooks.
2. Review the existing webhook list to avoid creating a duplicate endpoint.
3. Select New in the Joomla toolbar.
4. Complete the webhook form.
   • Name – Enter a short label that identifies the receiver, such as Slack moderation bridge or Internal audit pipeline.
   • Target URL – Enter the full http or https endpoint that should receive the webhook request.
   • Signing secret – Enter the shared secret used to generate and verify the X-Fediverse-Signature header.
   • Subscribed events – Use the Joomla multi-select field to search for and select each Fediverse event that should trigger this webhook.
   • Enabled – Leave this checked unless you want to keep the webhook stored but inactive.
5. Select Save in the toolbar.
6. To change an existing webhook later, return to the webhook list and select its name.
7. To remove one or more endpoints, select them in the list view and use Delete in the toolbar.

Supported events

• administrator actions such as actor enable or disable, inbox moderation, domain policy changes, key rotation, and configuration transfer
• publishing events for federated content create, update, and delete actions

Check your result

1. Save a webhook endpoint.
2. Perform one of the events you subscribed to, such as saving a domain policy or publishing a federated article.
3. Return to Components -> Fediverse -> Webhooks.
4. Confirm the Last delivery column updates for that endpoint.
5. Check the receiving system and confirm it received a JSON request with:
   • X-Fediverse-Event
   • X-Fediverse-Webhook
   • X-Fediverse-Signature

Troubleshooting

The New button is missing

• Likely cause: The site is not on the Pro plan, or your account cannot manage webhooks.
• Solution: Confirm the active license tier and review the Fediverse component permissions in Joomla.

Last delivery shows a failure

• Likely cause: The target URL rejected the request or is not reachable from the Joomla server.
• Solution: Verify the endpoint is reachable from the server environment, not only from your local browser, and check the receiver logs for the returned HTTP status.

The receiving system rejects the signature

• Likely cause: The signing secret on the Joomla side does not match the receiver configuration, or the receiver validates a modified body instead of the raw request body.
• Solution: Re-enter the same secret on both sides and confirm the receiver verifies the exact raw request payload.

No delivery appears after a Fediverse action

• Likely cause: The webhook is disabled or the relevant event is not selected.
• Solution: Open the webhook again from the list, confirm Enabled is checked, and verify that the correct subscribed events are selected.

Related tasks

• Export or Import Fediverse Configuration
• Manage Domain Policies (Allow/Block)
• Publish a Federated Article